Canadian Pharmacy Spam – directrxtoday.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos

Department of Justice – Ryan Haight Act


Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.167 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
200.11.67.194 Chile (Santiago)* Whois Google DNSStuff Urgentmessage.org
207.115.20.158 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address
Here is the text you submitted, with the IP addresses highlighted:

From Herminia Bruce Tue Apr 6 10:33:33 2010
X-Apparently-To:  Tue, 06 Apr 2010 03:39:21 -0700
Return-Path:
X-YahooFilteredBulk: 200.11.67.194
X-YMailISG: N9ateM0WLDvw1IdNHQWfY53JvyV8AcISQmYM_TW.eHaEz9WIAJck3Cm09ePHTLYO8pK_5XJrVO46KvR8QbZcVbajvuMECoz2J9kCw.6UvZqjGFs1K5nXXbhShhZoc3Fg__WHypnJH.Vg1uCPPGS.fGRvcA9JKu2j.VQUeINghcxC1I5sibgdn803U8.6cm7CVAyRJ73Mo7ZhJl.f
X-Originating-IP: [200.11.67.194]
Authentication-Results: mta103.sbc.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=bg.fnv.nl; dkim=neutral (no sig)
Received: from 200.11.67.194 (EHLO flpd241.prodigy.net) (207.115.20.158)
by mta103.sbc.mail.mud.yahoo.com with SMTP; Tue, 06 Apr 2010 03:39:21 -0700
X-Header-Overseas: Mail.from.Overseas.source.200.11.67.194
X-Originating-IP: [200.11.67.194]
Received: from el1s5a2 (mail1.meridiangold.com [200.11.67.194] (may be forged))
by flpd241.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id o36AbWjW003191;
Tue, 6 Apr 2010 03:39:05 -0700
Message-ID:
Reply-To: “Herminia Bruce”
From: “Herminia Bruce”
To: ,
Subject: Need Ritalin?
Date: Tue, 06 Apr 2010 05:33:33 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 93


Incredible_RxMedDeals are available at your fingertips! Goto -> http://directrxtoday.com

Address lookup

canonical name directrxtoday.com
aliases
addresses 111.148.252.84
Domain Whois record

Queried whois.internic.net with “dom directrxtoday.com”…

Domain Name: DIRECTRXTODAY.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.POLAMER98.COM
Name Server: NS2.PAMERAK9.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 04-apr-2010
Creation Date: 03-apr-2010
Expiration Date: 03-apr-2011

Last update of whois database: Wed, 07 Apr 2010 19:42:54 UTC
Queried whois.namerich.cn with “directrxtoday.com”…

DomainName : directrxtoday.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server: NS1.POLAMER98.COM
Name Server: NS2.PAMERAK9.COM
Status: clientTransferProhibited
Status: clientDeleteProhibited
Creation Date: 2010-04-03
Expiration Date: 2011-04-03
Last Update Date: 2010-04-05

Registrant Name: SONG XING
Registrant Organization: SONG XING
Registrant Address: NANJINGLU64
Registrant City: JN
Registrant Province/State: SD
Registrant Country Code: CN
Registrant Postal Code: 250045
Registrant Phone Number: +86.055184721271
Registrant Fax: +86.055184721271
Registrant Email: shanwulin_a@163.com

Administrative Name: SONG XING
Administrative Organization: SONG XING
Administrative Address: NANJINGLU64
Administrative City: JN
Administrative Province/State: SD
Administrative Country Code: CN
Administrative Postal Code: 250045
Administrative Phone Number: +86.055184721271
Administrative Fax: +86.055184721271
Administrative Email: shanwulin_a@163.com

Billing Name: SONG XING
Billing Organization: SONG XING
Billing Address: NANJINGLU64
Billing City: JN
Billing Province/State: SD
Billing Country Code: CN
Billing Postal Code: 250045
Billing Phone Number: +86.055184721271
Billing Fax: +86.055184721271
Billing Email: shanwulin_a@163.com

Technical Name: SONG XING
Technical Organization: SONG XING
Technical Address: NANJINGLU64
Technical City: JN
Technical Province/State: SD
Technical Country Code: CN
Technical Postal Code: 250045
Technical Phone Number: +86.055184721271
Technical Fax: +86.055184721271
Technical Email: shanwulin_a@163.com

; Please register your domains at
; http://www.namerich.cn
Network Whois record

Queried whois.apnic.net with “111.148.252.84”…

inetnum: 111.128.0.0 – 111.159.255.255
netname: NorthStar
descr: North Star Information Hi.tech Ltd. Co.
descr: No.18, Beifengwo Road, Haidian District,
descr: Beijing, China, 100038
country: CN
admin-c: CW1171-AP
tech-c: LQ568-AP
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20090507
mnt-by: APNIC-HM
mnt-routes: MAINT-NORTHSTAR-APNIC
mnt-lower: MAINT-NORTHSTAR-APNIC
changed: hm-changed@apnic.net 20090514
source: APNIC

route: 111.128.0.0/11
descr: North Star Information Hi.tech Ltd. Co.
origin: AS9394
country: CN
notify: luqian.ns@gmail.com
mnt-by: MAINT-NORTHSTAR-APNIC
changed: luqian.ns@gmail.com 20090716
source: APNIC

person: Cindy Wang
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
country: CN
phone: +86-10-51892147
fax-no: +86-10-51890674
e-mail: cindywang.ns@gmail.com
nic-hdl: CW1171-AP
mnt-by: MAINT-NORTHSTAR-APNIC
changed: hm-changed@apnic.net 20090210
source: APNIC

person: Lu Qian
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
country: CN
phone: +86-13717930628
fax-no: +86-10-51890674
e-mail: luqian.ns@gmail.com
nic-hdl: LQ568-AP
mnt-by: MAINT-NORTHSTAR-APNIC
changed: hm-changed@apnic.net 20090210
source: APNIC
DNS records

DNS query for 84.252.148.111.in-addr.arpa returned an error from the server: NameError

name class type data time to live
directrxtoday.com IN A 111.148.252.84 600s (00:10:00)
directrxtoday.com IN SOA
server: ns.directrxtoday.com
email: admin.directrxtoday.com
serial: 2010040301
refresh: 600
retry: 600
expire: 14400
minimum ttl: 600
600s (00:10:00)
directrxtoday.com IN NS ns1.polamer98.com 172800s (2.00:00:00)
directrxtoday.com IN NS ns2.pamerak9.com 172800s (2.00:00:00)
— end —
URL for this output | return to CentralOps.net, a service of Hexillion

One thought on “Canadian Pharmacy Spam – directrxtoday.com

  1. Scrub says:

    # Domain Date/Time Added
    #1 silvercain.com Wed, 07 Apr 2010 19:18:38 +0000
    #2 knowcold.com Wed, 07 Apr 2010 19:08:51 +0000
    #3 bedstick.com Wed, 07 Apr 2010 18:52:27 +0000
    #4 caincold.com Wed, 07 Apr 2010 18:21:29 +0000
    #5 myclearrx01.com Wed, 07 Apr 2010 18:07:07 +0000
    #6 camecook.com Wed, 07 Apr 2010 16:01:22 +0000
    #7 myrxbool.com Wed, 07 Apr 2010 15:42:52 +0000
    #8 knowwarm.com Wed, 07 Apr 2010 14:10:47 +0000
    #9 casinosbestlux.net Wed, 07 Apr 2010 12:33:40 +0000
    #10 bestcasinoslux.net Wed, 07 Apr 2010 12:20:42 +0000
    #11 goldcain.com Wed, 07 Apr 2010 10:44:26 +0000
    #12 lightlings.com Wed, 07 Apr 2010 10:42:47 +0000
    #13 weekvalley.com Wed, 07 Apr 2010 10:17:55 +0000
    #14 rxboolonline.com Wed, 07 Apr 2010 09:52:30 +0000
    #15 luxbestcasinos.net Wed, 07 Apr 2010 08:11:50 +0000
    #16 knowhot.com Wed, 07 Apr 2010 08:01:18 +0000
    #17 icemeant.com Wed, 07 Apr 2010 07:43:18 +0000
    #18 qualitypills-discount.com Wed, 07 Apr 2010 06:10:24 +0000
    #19 weightverb.com Wed, 07 Apr 2010 05:27:08 +0000
    #20 lowpricepharmacyrx.com Wed, 07 Apr 2010 04:40:52 +0000
    #21 casinosidbest.net Wed, 07 Apr 2010 02:55:28 +0000
    #22 casinosbestid.net Wed, 07 Apr 2010 02:52:57 +0000
    #23 knowunder.com Wed, 07 Apr 2010 02:48:48 +0000
    #24 hurryfor.com Wed, 07 Apr 2010 02:45:55 +0000
    #25 topselectionrx.com Wed, 07 Apr 2010 01:45:57 +0000
    #26 goldsilves.com Wed, 07 Apr 2010 01:44:02 +0000
    #27 knowbeach.com Wed, 07 Apr 2010 01:43:16 +0000
    #28 prescriptzwithease.com Wed, 07 Apr 2010 01:14:05 +0000
    #29 bestcasinosid.net Wed, 07 Apr 2010 00:41:11 +0000
    #30 lucidgalore.com Tue, 06 Apr 2010 22:44:25 +0000
    #31 knowover.com Tue, 06 Apr 2010 19:54:08 +0000
    #32 grastobinas.net Tue, 06 Apr 2010 18:21:32 +0000
    #33 silverwarm.com Tue, 06 Apr 2010 17:54:00 +0000
    #34 longbeast.com Tue, 06 Apr 2010 17:09:38 +0000
    #35 braincain.com Tue, 06 Apr 2010 14:44:01 +0000
    #36 beststoregoodnic20.com Tue, 06 Apr 2010 13:31:27 +0000
    #37 beststoregoodnic19.com Tue, 06 Apr 2010 13:21:18 +0000
    #38 beststoregoodnic18.com Tue, 06 Apr 2010 13:20:57 +0000
    #39 beststoregoodnic16.com Tue, 06 Apr 2010 13:02:24 +0000
    #40 beststoregoodnic17.com Tue, 06 Apr 2010 12:56:48 +0000
    #41 freedirectrx.com Tue, 06 Apr 2010 12:45:32 +0000
    #42 longalone.com Tue, 06 Apr 2010 12:14:17 +0000
    #43 brainsilver.com Tue, 06 Apr 2010 10:43:25 +0000
    #44 runchance.com Tue, 06 Apr 2010 07:54:54 +0000
    #45 alonebottle.com Tue, 06 Apr 2010 07:08:45 +0000
    #46 brainwarm.com Tue, 06 Apr 2010 06:43:34 +0000
    #47 directrxtoday.com Tue, 06 Apr 2010 03:16:52 +0000
    #48 brainhot.com Tue, 06 Apr 2010 02:44:42 +0000
    #49 weekcheck.com Tue, 06 Apr 2010 02:20:02 +0000
    #50 longopen.com Tue, 06 Apr 2010 02:10:14 +0000
    #51 longmice.com Tue, 06 Apr 2010 01:44:28 +0000
    #52 casinosbest-vip.net Tue, 06 Apr 2010 00:32:33 +0000
    #53 vipcasinos-best.net Tue, 06 Apr 2010 00:15:00 +0000
    #54 senttwo.com Mon, 05 Apr 2010 23:10:04 +0000
    #55 brainunder.com Mon, 05 Apr 2010 22:47:13 +0000
    #56 canada-pharmacyrx.com Mon, 05 Apr 2010 22:39:38 +0000
    #57 lastawesome.com Mon, 05 Apr 2010 17:46:24 +0000
    #58 seatverb.com Mon, 05 Apr 2010 14:42:16 +0000
    #59 pharmagoodbes19.com Mon, 05 Apr 2010 12:15:41 +0000
    #60 pharmagoodbes18.com Mon, 05 Apr 2010 11:57:34 +0000
    #61 pharmagoodbes17.com Mon, 05 Apr 2010 11:46:30 +0000
    #62 caringfinal.com Mon, 05 Apr 2010 10:43:21 +0000
    #63 leftbottle.com Mon, 05 Apr 2010 09:29:35 +0000
    #64 casinosbest-lux.net Mon, 05 Apr 2010 08:41:20 +0000
    #65 pluralgifted.com Mon, 05 Apr 2010 06:45:43 +0000
    #66 wrotesearch.com Mon, 05 Apr 2010 02:46:10 +0000
    #67 lastneck.com Sun, 04 Apr 2010 23:16:37 +0000
    #68 beeast.com Sun, 04 Apr 2010 22:42:45 +0000
    #69 onlyshore.com Sun, 04 Apr 2010 22:31:06 +0000
    #70 wordclose.com Sun, 04 Apr 2010 17:07:58 +0000
    #71 leftplace.com Sun, 04 Apr 2010 16:26:14 +0000
    #72 wordbottle.com Sun, 04 Apr 2010 16:02:32 +0000
    #73 checkawesome.com Sun, 04 Apr 2010 15:41:35 +0000
    #74 pharmacyrxcanadian.com Sun, 04 Apr 2010 15:31:32 +0000
    #75 windceleb.com Sun, 04 Apr 2010 12:41:41 +0000
    #76 casinosluxbest.net Sun, 04 Apr 2010 10:31:04 +0000
    #77 bestlux-casinos.net Sun, 04 Apr 2010 08:46:56 +0000
    #78 lifecasinos-best.net Sun, 04 Apr 2010 07:49:23 +0000
    #79 aloneword.com Sun, 04 Apr 2010 07:09:30 +0000
    #80 cheap-pharmacyrx.com Sun, 04 Apr 2010 06:07:54 +0000
    #81 alonewire.com Sun, 04 Apr 2010 05:57:27 +0000
    #82 checklamp.com Sun, 04 Apr 2010 02:31:16 +0000
    #83 proroofrx.com Sun, 04 Apr 2010 01:58:25 +0000
    #84 worddark.com Sun, 04 Apr 2010 01:45:14 +0000
    #85 matchserene.com Sat, 03 Apr 2010 19:23:26 +0000
    #86 insanerx.com Sat, 03 Apr 2010 17:26:19 +0000
    #87 hourgive.com Sat, 03 Apr 2010 12:32:12 +0000
    #88 dnevalnosas.net Sat, 03 Apr 2010 11:01:02 +0000
    #89 youfavrx1.com Sat, 03 Apr 2010 09:59:40 +0000
    #90 clubcasinosbest.net Sat, 03 Apr 2010 09:21:55 +0000
    #91 casinosclubbest.net Sat, 03 Apr 2010 09:20:12 +0000
    #92 listoccur.com Sat, 03 Apr 2010 06:32:19 +0000
    #93 studybought.com Sat, 03 Apr 2010 05:11:52 +0000
    #94 masterdimple.com Sat, 03 Apr 2010 01:18:40 +0000
    #95 lastafter.com Fri, 02 Apr 2010 23:31:32 +0000
    #96 abovepharmacys.com Fri, 02 Apr 2010 20:51:48 +0000
    #97 symbolarea.com Fri, 02 Apr 2010 19:57:13 +0000

Leave a Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s